Behavioral task
behavioral1
Sample
pXdN91.sh4.elf
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
pXdN91.sh4.elf
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
pXdN91.sh4.elf
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral4
Sample
pXdN91.sh4.elf
Resource
debian9-mipsel-20240729-en
General
-
Target
pXdN91.sh4.elf
-
Size
106KB
-
MD5
5fb8b4d839dba1aee5af7a4dd6893507
-
SHA1
cf98ca702d611db48df233cb460541a7601329de
-
SHA256
2bf23eda05285a87d6e2746f7647dd5c7003ed4e3c56b94f406764c0a4932131
-
SHA512
bdc7ef09ad24d85c688569e8d2da863edca8dea6346446899fa7e16a5879168f40fff741907e521a5bb4672547f29d716d0c18d42b548497abb85dd3167d6660
-
SSDEEP
1536:lGB6X+zz1iNJ0P7xfkmHgpHQzXlRtQcm1stitH/Mhyms+ex+6H1G8:qvX7SMgdLd1qiHxmlexdH1G8
Malware Config
Extracted
gafgyt
154.213.187.14:6149
Signatures
-
Detected Gafgyt variant 1 IoCs
Processes:
resource yara_rule sample family_gafgyt -
Gafgyt family
Files
-
pXdN91.sh4.elf.elf linux sh